From mboxrd@z Thu Jan 1 00:00:00 1970 From: ng0 Subject: github tarballs problematic? Date: Thu, 8 Jun 2017 20:35:28 +0000 Message-ID: <20170608203528.rvp4lhdqu463ns2x@abyayala> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:46533) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dJ49u-0002fY-Hp for guix-devel@gnu.org; Thu, 08 Jun 2017 16:36:02 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dJ49q-0007te-Rf for guix-devel@gnu.org; Thu, 08 Jun 2017 16:35:58 -0400 Received: from aibo.runbox.com ([91.220.196.211]:37188) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dJ49q-0007tS-Ii for guix-devel@gnu.org; Thu, 08 Jun 2017 16:35:54 -0400 Received: from [10.9.9.211] (helo=mailfront11.runbox.com) by mailtransmit02.runbox with esmtp (Exim 4.86_2) (envelope-from ) id 1dJ49o-0003JV-Uu for guix-devel@gnu.org; Thu, 08 Jun 2017 22:35:53 +0200 Received: from 178.ip-217-182-168.eu ([217.182.168.178] helo=localhost) by mailfront11.runbox.com with esmtpsa (uid:892961 ) (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) id 1dJ49S-00014n-I7 for guix-devel@gnu.org; Thu, 08 Jun 2017 22:35:30 +0200 Content-Disposition: inline List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org I've just come across this post via https://pagure.io/pagure/issue/861 https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/UDZ2WKMTOE6J2M4K7PF5OWSSC4BAX2SH/ quote in almost full: today, I've accidentally attested there are no stability guarantees with the on-demand archives from common git hosting sites when preparing a new pacemaker update, redownloading "spectool -s 0 pacemaker.spec" of the original (-0.1.rc1, from 2 weeks ago) spec and comparing the hashes, which (surprisingly to me) didn't match (they were at any similar test in the past). Then I looked at the adiff output: ... diff -ru Unpack-2241/pacemaker-Pacemaker-1.1.17-rc1/configure.ac Unpack-6255/pacemaker-Pacemaker-1.1.17-rc1/configure.ac --- Unpack-2241/pacemaker-Pacemaker-1.1.17-rc1/configure.ac2017-05-09 00:55:15.000000000 +0200 +++ Unpack-6255/pacemaker-Pacemaker-1.1.17-rc1/configure.ac2017-05-09 00:55:15.000000000 +0200 @@ -1159,7 +1159,7 @@ AC_PATH_PROGS(GIT, git false) AC_MSG_CHECKING(build version) -BUILD_VERSION=0459f40 +BUILD_VERSION=0459f40958 if test != ":%h$"; then AC_MSG_RESULT(archive hash: ) for configure.ac that indeed has export-subst git attribute set and the change itself arises from "$Format:%h$" substitution. This likely means GitHub was internally updated to use equivalent of git 2.11 feature of abbreviation length autoscaling within last 14 days. Hope this will be useful for some (e.g. fedora-review tool has a check to redownload and diff sources against SRPM content, IIRC). -- ng0 OpenPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588